Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/2ff067ce-0282-3523-acb7-16e0caa34012.roa
File:                     2ff067ce-0282-3523-acb7-16e0caa34012.roa (raw, json)
Hash identifier:          D9EgBg9n+B69XHv3M5AOwKGqRmp5/zah1jKjSlZcMws=
Subject key identifier:   51:A0:62:B5:71:A4:64:46:4C:A5:BF:28:94:FB:5C:6D:42:27:BA:1D
Certificate issuer:       /CN=9c7abcd7-8ab3-460c-8950-f024e1b500dd
Certificate serial:       010D0C9F4328584DDD2078F2A470BC67320E5BC0
Authority key identifier: 47:0B:25:6D:0D:34:8D:EB:7A:79:BB:41:B9:72:37:10:EC:38:EA:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/2ff067ce-0282-3523-acb7-16e0caa34012.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     198949
IP address blocks:        64.187.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:78:f2:a4:70:bc:67:32:0e:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7abcd7-8ab3-460c-8950-f024e1b500dd
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=fe219421-c1b6-4a5a-896e-d418fb4648f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:30:12:94:49:23:3a:2b:ba:0c:08:13:e8:
                    82:ef:64:d6:87:a1:9f:40:c2:73:c4:b1:e9:07:b7:
                    da:ef:ea:9a:73:12:25:31:3e:e4:2d:56:8a:a0:7f:
                    c0:44:86:07:64:35:f8:6e:81:8b:94:b4:5c:2b:38:
                    6c:57:f6:14:8a:d0:de:03:ef:d0:19:5e:3f:61:bb:
                    12:06:1e:6e:5d:9a:4e:35:dc:66:b8:79:d8:81:13:
                    7c:6b:84:4b:4c:4b:fe:5a:68:79:32:9e:b5:ff:f9:
                    6b:90:55:f5:5b:72:d7:5c:85:9c:53:5e:bc:ac:de:
                    a4:79:22:dc:f1:2c:51:b8:97:c7:e3:6a:9f:f7:43:
                    52:4c:3c:ae:29:46:a2:3a:9a:46:32:e4:8c:01:9c:
                    2d:b5:e7:8e:50:4c:95:f7:f8:e8:41:1f:ba:5d:f0:
                    74:79:d2:4b:ea:11:ae:0d:e0:ad:ed:94:b2:3c:f1:
                    75:0c:1f:bf:2e:02:61:03:8c:59:92:27:0c:00:ec:
                    99:85:93:f1:8d:ba:4f:75:14:7c:17:24:52:39:eb:
                    38:9c:b9:ac:fd:1e:50:9f:a7:d6:17:db:67:46:6f:
                    c0:71:56:5b:ac:b1:5b:1d:cc:42:41:28:f2:35:48:
                    e0:d4:e8:b5:fc:0d:de:a1:55:7d:20:94:42:6d:b8:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A0:62:B5:71:A4:64:46:4C:A5:BF:28:94:FB:5C:6D:42:27:BA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/2ff067ce-0282-3523-acb7-16e0caa34012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd/9c7abcd7-8ab3-460c-8950-f024e1b500dd.crl

            X509v3 Authority Key Identifier:
                keyid:47:0B:25:6D:0D:34:8D:EB:7A:79:BB:41:B9:72:37:10:EC:38:EA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9c7abcd7-8ab3-460c-8950-f024e1b500dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:69:85:ac:83:9a:9a:2e:65:f1:71:55:d0:2d:49:40:05:41:
         03:f2:df:8d:66:d4:a0:0f:1e:77:2e:73:93:55:82:4d:5c:e8:
         b1:e7:b0:04:74:83:7f:43:0f:b5:fe:99:2c:f5:12:91:49:37:
         7a:94:01:bb:89:99:04:2c:77:e4:02:db:ee:fc:5f:37:da:5c:
         3d:48:86:6f:1d:43:45:08:48:0c:ed:eb:8e:2e:99:b4:33:9f:
         56:97:51:8a:7b:0a:ae:00:46:df:06:bb:f4:c1:39:f6:62:6f:
         d5:85:d4:69:b6:9c:8e:44:c3:c5:ca:1b:77:6e:15:2a:6b:09:
         e5:9e:0a:cb:4a:e4:5f:f1:d5:e0:7c:40:d7:db:73:2f:d5:6e:
         18:6f:4c:9a:98:d2:73:58:3c:12:50:2f:75:98:b6:8e:80:9e:
         aa:42:ed:27:28:66:ed:ef:2d:ef:90:45:26:b9:19:66:71:65:
         8b:a2:df:1c:b5:e6:64:72:16:f7:35:83:e8:59:bb:36:98:2d:
         4d:e2:e0:8b:00:d3:72:72:5c:96:cd:f1:c9:c2:7b:b4:aa:7a:
         5e:cc:ac:ec:71:dd:67:6c:ce:81:24:82:a7:04:8b:cd:4b:39:
         a7:c9:ea:9d:f5:c3:ab:65:a6:1e:6e:db:6a:b4:e4:b3:5f:09:
         3d:08:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:40:28 2026 by rpki-client